Enhance UX for SAST and SCA - lua and rust

[saisatishkarra]

• Shared action for Rust Lint and SCA only on directory path:

  • Report Grype CVE SCA results to GitHub Code Scanning for public repositories
  • Report Grype CVE SCA results to workflow artifact and console log for private repositories
  • Report Rust Clippy Linting results as GitHub PR annotations and GitHub status check for commit

• Shared action for Lua check Lint and SCA

  • Report Lua check results as GitHub PR annotations and Github status check for commits using Junit XML
  • SCA: No support yet

• Shared SEMGREP action for SAST across `all supported languages

  • Auto-detect languages for the repository while scanning
  • Optional additional config ruleset can be provided as input
  • Report Semgrep SAST results as GitHub PR annotations and GitHub status check for commits on private repositories
  • Report Semgrep SAST results to GitHub Code scanning for public repositories

Known limitations:

• GitHub Code scanning Alerts reported by Grype SCA Code scanning check are available only in Security -> Github Code Scanning -> filter using pr:<number>
• Luacheck / Rust clippy Reports / Results Github check results are associated with the wrong workflow instead of the actually specified workflow from where the steps are run

POC example:
Scimia/atc-router#4
https://github.com/Scimia/atc-router/security/code-scanning?query=is%3Aopen+pr%3A4

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[github-actions]

Luacheck Report

1 files  1 suites   0s ⏱️
4 tests 4 ✔️ 0 💤 0 ❌
8 runs  8 ✔️ 0 💤 0 ❌

Results for commit d3d39ca.

♻️ This comment has been updated with latest results.